$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: eekyA4yvhSWn8BF6mY5jQMHDZZZeG6m13R1bsvpOF7k= Subject key identifier: 6B:E8:9F:BB:80:51:E5:04:F7:49:AE:14:B8:7A:E9:09:B2:99:5D:B2 Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F43285849BC74AAC77E7F42D80BD94680 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:aa:c7:7e:7f:42:d8:0b:d9:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=f634c344-5350-4caa-b77b-4898fc6a922e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:26:5c:86:e4:c6:10:f4:00:bd:72:ff:b8: 58:51:c9:15:e5:8a:d0:99:eb:8a:64:56:13:4e:5c: 68:ea:54:fb:09:ab:24:54:bd:95:4b:94:80:38:98: c7:39:5b:52:b6:58:b4:c4:1e:30:89:70:21:5f:7e: 11:93:f4:a3:b5:c3:25:8c:f0:cb:a6:24:00:3b:a1: b8:75:a8:fa:60:24:c3:a2:df:90:5a:bb:ee:d0:e8: e7:72:24:da:ea:e8:02:6e:ce:cf:31:5a:38:dd:21: 6a:b4:29:1f:f5:43:d9:b6:7d:e7:33:76:95:d0:a0: 50:56:8b:00:07:ef:a7:b6:3f:f9:ff:f1:af:fe:db: 5e:11:ea:70:4e:d4:16:45:5b:61:cc:ab:7d:b7:d9: 0c:1e:36:e5:2c:ed:26:9d:07:cc:0c:09:ec:65:7f: 9b:18:4e:76:9d:29:2b:dc:62:f6:be:ef:a5:71:9a: e5:c7:01:a8:61:61:fd:c0:5b:5a:ce:71:ff:1a:2f: c9:db:82:1f:27:90:1c:55:ea:8e:4d:91:50:5e:55: 23:1f:96:d0:86:68:b9:3a:35:5d:39:a4:85:a5:fe: b6:8c:d8:ff:bc:a7:0a:55:a2:ca:08:48:03:c1:70: 67:f2:02:32:2b:a4:6c:af:b0:14:d2:0f:ba:77:c0: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E8:9F:BB:80:51:E5:04:F7:49:AE:14:B8:7A:E9:09:B2:99:5D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:57:4e:86:e3:55:03:10:00:3f:43:1f:8f:ad:77:b1:76:81: ea:76:3c:a9:c0:29:89:12:29:63:b3:31:1b:57:6b:bc:a7:42: 0b:59:c4:66:57:90:ce:56:8e:ce:81:a2:fe:74:6f:8b:1b:ee: f6:43:a8:e3:67:92:87:1d:08:dc:23:46:9a:5b:53:9a:70:9e: 42:9d:5c:a0:8c:76:f3:1a:9f:23:8a:24:9b:76:30:d7:98:ac: 09:42:8d:47:69:67:db:79:80:27:a1:0e:7e:13:54:20:1c:fd: 36:be:6c:cd:9d:e1:b3:c9:16:d2:85:af:1a:67:c3:31:b4:42: 52:bd:41:74:fb:ce:18:a7:8c:79:a4:1b:0b:46:82:12:2d:02: 48:2e:5d:d2:aa:f8:c3:26:5d:fb:9b:ff:23:25:db:56:b1:10: 88:b2:6f:c8:9d:c0:61:ee:78:84:21:a3:09:e1:ac:cf:10:e6: 58:b2:7c:2f:98:85:7e:64:80:2a:e3:fe:9d:70:35:30:d2:a2: fb:df:03:26:f3:e2:01:05:1d:64:21:53:77:1b:a9:0e:52:e5: b4:aa:b7:15:c6:66:d4:bb:8a:7e:66:e2:ef:c2:3d:fe:4f:63: e1:cd:b4:de:81:7e:1a:cc:3b:88:09:45:b1:63:60:96:2b:a6: 7d:78:24:5d -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEm8dKrHfn9C2AvZRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjYzNGMzNDQtNTM1MC00Y2FhLWI3N2ItNDg5OGZjNmE5MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28QmXIbkxhD0AL1y/7hYUckV5YrQmeuKZFYT Tlxo6lT7CaskVL2VS5SAOJjHOVtStli0xB4wiXAhX34Rk/SjtcMljPDLpiQAO6G4 daj6YCTDot+QWrvu0OjnciTa6ugCbs7PMVo43SFqtCkf9UPZtn3nM3aV0KBQVosA B++ntj/5//Gv/tteEepwTtQWRVthzKt9t9kMHjblLO0mnQfMDAnsZX+bGE52nSkr 3GL2vu+lcZrlxwGoYWH9wFtaznH/Gi/J24IfJ5AcVeqOTZFQXlUjH5bQhmi5OjVd OaSFpf62jNj/vKcKVaLKCEgDwXBn8gIyK6Rsr7AU0g+6d8AmwwIDAQABo4IDgDCC A3wwHQYDVR0OBBYEFGvon7uAUeUE90muFLh66QmymV2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADANEYDBADAQV8DAwDMeTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAWV06G41UDEAA/Qx+PrXexdoHqdjypwCmJEiljszEbV2u8p0ILWcRmV5DOVo7O gaL+dG+LG+72Q6jjZ5KHHQjcI0aaW1OacJ5CnVygjHbzGp8jiiSbdjDXmKwJQo1H aWfbeYAnoQ5+E1QgHP02vmzNneGzyRbSha8aZ8MxtEJSvUF0+84Yp4x5pBsLRoIS LQJILl3SqvjDJl37m/8jJdtWsRCIsm/IncBh7niEIaMJ4azPEOZYsnwvmIV+ZIAq 4/6dcDUw0qL73wMm8+IBBR1kIVN3G6kOUuW0qrcVxmbUu4p+ZuLvwj3+T2PhzbTe gX4azDuICUWxY2CWK6Z9eCRd -----END CERTIFICATE-----Generated at Mon May 12 02:53:38 2025 by rpki-client